DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
e01d48c752b6dccda6503384376b2f26_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e01d48c752b6dccda6503384376b2f26_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e01d48c752b6dccda6503384376b2f26_JaffaCakes118
Size
44KB
MD5
e01d48c752b6dccda6503384376b2f26
SHA1
0c23cb521fb877fd5a6783c1b88d5e4fc6434a05
SHA256
347e0b1dc33c6b27eb3b95e8b1345a284113808322262f4bd444453323b8ba4f
SHA512
a50068170197fc587e3ba9105cd685d0cc346150cd4920d501cf5ea0368f81a058a7e4a2dfd6f185a22f5d4a9bcdccb26af56e562b3e0acd6513c812ae3f941e
SSDEEP
768:nD3qVBPeU6E3DDdx4LH9kWljh+WOw7/r7YhVG5QHDEZp8ueqnAueuX51/AIb//A2:D6VBPe+DReL9kkgvw7DkhUQjnut/0k
Checks for missing Authenticode signature.
resource |
---|
e01d48c752b6dccda6503384376b2f26_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteObject
listen
GetModuleFileNameExA
StrCmpW
malloc
RegCloseKey
ShellExecuteA
ExitWindowsEx
ImmReleaseContext
capCreateCaptureWindowA
CreateStreamOnHGlobal
waveInUnprepareHeader
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE